Stored Cross-Site Scripting Vulnerability in Modern Design Library for WordPress

CVE-2025-5842

What is CVE-2025-5842?

The Modern Design Library plugin for WordPress is prone to Stored Cross-Site Scripting due to insufficient input validation on the 'class' parameter. This vulnerability allows authenticated users with Contributor-level access and higher to inject malicious scripts. When other users access compromised pages, these scripts execute within their browsers, potentially leading to data theft and security breaches.

References